Your Challenge as a CISO
Monday morning. As CISO, you open your laptop and immediately feel the tension. Last week, another report came in about a phishing attack that narrowly avoided a disaster. Last month, there was a data breach caused by unsafe file sharing. You know that the organization is under a constant barrage of threats: social engineering, phishing, and a lack of secure behavior among employees.
Despite previous phishing simulations and e-learning modules, the risk remains high. Even though you’ve been communicating security policies for years, employees still often behave in an unsafe manner.
Download the SAFE brochure
Learn more about the various interventions in our SAFE brochure.
DownloadThe Gap Between Knowledge and Behavior
At Bureau Veritas Cybersecurity, we know that simply increasing knowledge isn’t enough to bring about behavioral change. In practice, we see a significant gap between knowledge and behavior: employees know how to behave securely, but don’t always perform that behavior in practice.
The human side of information security therefore requires a psychological approach. Bureau Veritas Cybersecurity can help you with this through the SAFE Awareness and Behavior program.
Herman Jeschke
Program Manager, Nautical Cybersecurity
National Shipping Company - Rijkswaterstaat
For our crew, cybersecurity long felt like something that didn’t really apply to them. The generic e-learning courses didn’t align with the context of our ships. Thanks to our customized program with cybersecurity toolkits, tailored to the reality of our ships, cybersecurity is now truly a reality on board.
Psychology in Cybersecurity
We would never expect a psychologist to build a firewall. Yet many organizations deploy security specialists to change behavior. Bureau Veritas Cybersecurity distinguishes itself through its unique combination of technical cybersecurity expertise and behavioral science knowledge. Our psychologists look beyond mere awareness and focus on the underlying factors that influence behavior. This enables us to work with you to achieve lasting behavioral change.
How SAFE Differs from Standard Awareness Solutions
▪ Focus on behavior as the ultimate goal
▪ Combination of people, technology, and process
▪ Targeted approach based on behavioral risks identified in the baseline assessment
▪ Ongoing attention with a positive approach to security
▪ Customization for target groups
You can get started with these services
01
Assess current behavior
To know whether you’re changing behavior, you need to know where your organization stands. We’ll help you with the following services:
SAMMA: Security Awareness Maturity Model Assessment
We assess the maturity of your people-centric security program so that, as your partner, we can grow with you toward the next level of maturity.
We measure behavior and barriers, focusing on knowledge, motivation, and opportunity.
Customized Programs for Target Audiences
We investigate what holds people back and systematically remove barriers with tailored solutions.
Phishing and social engineering assessments
We assess your employees’ resilience against phishing and other social engineering attacks.
02
Change Behavior
Armed with insights into your employees’ resilience, we work as partners to implement a risk-based approach. Whether you’re looking for a single specific service or a comprehensive SAFE program built from various services as building blocks, we’ll help you explore the following solutions:
Cybershow and Cyber On Stage
We put information security in the spotlight. Our accessible, interactive Cybershow lets your employees experience their role in cybersecurity.
With Cyber on Stage (train-the-trainer), we train motivated employees to become internal trainers.
Ambassador Program
We focus on building a bottom-up security culture with cybersecurity ambassadors and work with them to develop customized solutions.
Cyber Games
We increase your employees’ engagement by making information security an engaging experience through innovative game formats such as the Clean Space Race and Confidential Catch.
SAFE Behavior Boost
Together, we focus on four key behaviors using our most effective interventions. A boost, not a sprint.
We prevent your employees from skimming through e-learning courses by using gamification and manageable modules. Request a demo here and contact us about (role-based) training.
Multimedia Campaign
We focus on overcoming resistance and driving behavioral change through communication materials that incorporate psychological techniques, such as posters or explanatory videos.
Example of a Roadmap
Many clients work with our experts to develop a multi-year program for structural behavioral change within their organization. Below is an example of a typical roadmap. We’d be happy to work with you to determine what your organization needs.
Phishing Masters
The Phishing Masters program creates effective learning experiences to systematically reduce your click-through rate
Spot the Mole
The Spot the Mole game combats social engineering using gamification and behavioral change techniques
Contact Us
Would you like to learn more about achieving behavioral change in cybersecurity? Fill out the form and we’ll contact you within one business day.
Why choose Bureau Veritas Cybersecurity
Bureau Veritas Cybersecurity is your expert partner in cybersecurity. We help organizations identify risks, strengthen defenses and comply with cybersecurity standards and regulations. Our services cover people, processes and technology, ranging from awareness training and social engineering to security advice, compliance and penetration testing.
We operate across IT, OT and IoT environments, supporting both digital systems and connected products. With over 300 cybersecurity professionals worldwide, we combine deep technical expertise with a global presence. Bureau Veritas Cybersecurity is part of the Bureau Veritas Group, a global leader in testing, inspection and certification.